git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 192910a) | patch
connector: fix skb double free in cn_rx_skb()
authorPatrick McHardy <kaber@trash.net>
Tue, 12 Apr 2011 05:39:51 +0000 (05:39 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 12 Apr 2011 21:38:57 +0000 (14:38 -0700)
commit0e08785845093ef4ed220463a739bc8d0db95de7
treee3c9539949a3c00ea2457439bb6f36e5c4842f54tree | snapshot
parent192910a6cca5e50e5bd6cbd1da0e7376c7adfe62commit | diff
connector: fix skb double free in cn_rx_skb()

When a skb is delivered to a registered callback, cn_call_callback()
incorrectly returns -ENODEV after freeing the skb, causing cn_rx_skb()
to free the skb a second time.

Reported-by: Eric B Munson <emunson@mgebm.net>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Tested-by: Eric B Munson <emunson@mgebm.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/connector/connector.c diff | blob | history
Pandora Kernel Repository